Behavioral task
behavioral1
Sample
30c516a8b29ae257a1947884cf012f7fbc8ea0c52480569f0d8dccf13d0843cd.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
30c516a8b29ae257a1947884cf012f7fbc8ea0c52480569f0d8dccf13d0843cd.exe
Resource
win10v2004-20230220-en
General
-
Target
30c516a8b29ae257a1947884cf012f7fbc8ea0c52480569f0d8dccf13d0843cd
-
Size
3.4MB
-
MD5
0cf54cbd67d83b6db07d94d951427dde
-
SHA1
b2120520d648331d841ccc968e8eb8942f3eb845
-
SHA256
30c516a8b29ae257a1947884cf012f7fbc8ea0c52480569f0d8dccf13d0843cd
-
SHA512
6e9a77eb9ba6745ca83cbcd956c2e0ba0b93dfb6ad9f652ddcfd2716457939bda464440a1bc40f36190f030ef57764f8d64119c5b198a78c34a21a9925c886fa
-
SSDEEP
49152:SKUDfBRYRtocB40AXzW41SxKJGiWJBg0t2sMigva7hef:7ocONzWmMKklB72sd0q2
Malware Config
Signatures
-
Blackmoon family
-
Detect Blackmoon payload 1 IoCs
Processes:
resource yara_rule sample family_blackmoon
Files
-
30c516a8b29ae257a1947884cf012f7fbc8ea0c52480569f0d8dccf13d0843cd.exe windows x86
bf93fdbfc9f1aec2f1af3edeb77f9d78
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetModuleHandleW
FindResourceA
FreeResource
Sleep
VirtualFree
GetVersionExA
EnterCriticalSection
CreateThread
LeaveCriticalSection
DeleteCriticalSection
GetExitCodeThread
TerminateThread
InitializeCriticalSection
lstrcpyA
WideCharToMultiByte
VirtualProtect
HeapFree
VirtualAllocEx
VirtualFreeEx
ReadProcessMemory
GetProcessHeap
ExitProcess
HeapAlloc
HeapReAlloc
IsBadReadPtr
WriteFile
CreateFileA
GetStartupInfoA
GetExitCodeProcess
GetModuleFileNameA
GetFileSize
GetEnvironmentVariableA
SetFilePointer
LCMapStringA
SetEndOfFile
GetCommandLineA
LoadLibraryA
GlobalAlloc
MultiByteToWideChar
SetHandleCount
RtlMoveMemory
LockResource
LoadResource
SizeofResource
FindResourceW
FlushFileBuffers
SetStdHandle
lstrlenA
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
GetOEMCP
GetACP
GetCPInfo
LCMapStringW
IsBadWritePtr
RaiseException
HeapCreate
HeapDestroy
TlsGetValue
SetLastError
TlsAlloc
TlsSetValue
GetFileType
GetStdHandle
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
InterlockedIncrement
InterlockedDecrement
RtlUnwind
GetVersion
GetCurrentProcess
GetLastError
GetWindowsDirectoryA
GetSystemDirectoryA
Module32Next
Module32First
CreateProcessA
SetWaitableTimer
CreateWaitableTimerA
SetCurrentDirectoryA
GetTempPathA
Process32Next
Process32First
CreateToolhelp32Snapshot
Wow64RevertWow64FsRedirection
Wow64EnableWow64FsRedirection
LocalSize
TerminateProcess
OpenProcess
GetCurrentProcessId
lstrcpyn
ReadFile
PeekNamedPipe
WaitForSingleObject
CreatePipe
IsWow64Process
DeleteFileA
WriteProcessMemory
RtlZeroMemory
CloseHandle
VirtualAlloc
lstrlenW
GlobalFree
GlobalUnlock
IsBadCodePtr
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
FreeLibrary
GetProcAddress
LoadLibraryExA
CreateEventA
OpenEventA
GlobalLock
GetModuleHandleA
user32
GetMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage
IsWindow
GetSystemMetrics
CloseDesktop
MsgWaitForMultipleObjects
OpenDesktopA
CreateDesktopA
EnumChildWindows
GetClassNameA
GetWindowTextA
PostMessageA
GetClassInfoExA
GetDC
ReleaseDC
BringWindowToTop
SetForegroundWindow
MessageBoxA
MessageBoxTimeoutA
GetWindowLongA
GetWindowDC
WindowFromDC
MessageBeep
SetTimer
KillTimer
LoadIconA
SystemParametersInfoA
SetActiveWindow
EnableWindow
SendMessageA
BeginPaint
InvalidateRect
GetParent
TrackMouseEvent
GetClassLongA
SetClassLongA
SetCursor
SetFocus
GetKeyState
CallWindowProcA
ShowWindow
UpdateLayeredWindow
IsWindowVisible
GetAncestor
FindWindowExA
ClientToScreen
OffsetRect
CreateWindowExA
GetFocus
SendMessageW
UnregisterClassA
GetWindowThreadProcessId
LookupIconIdFromDirectoryEx
CreateIconFromResourceEx
ChangeWindowMessageFilter
PeekMessageA
WaitMessage
SetWindowLongA
GetWindowTextLengthA
SetParent
ScreenToClient
SetRectEmpty
SetWindowRgn
DestroyCursor
LoadCursorFromFileA
UpdateWindow
ReleaseCapture
SetCapture
AttachThreadInput
GetUpdateRect
IsRectEmpty
DestroyWindow
FindWindowA
CreateIconFromResource
EnumDisplaySettingsA
GetWindow
wsprintfA
GetCursorPos
GetDesktopWindow
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
GetClipboardData
MoveWindow
SetWindowPos
GetWindowRect
DefWindowProcA
GetPropA
SetPropA
RegisterClassExA
LoadCursorA
LoadImageA
GetClientRect
advapi32
RegQueryValueA
RegCloseKey
RegOpenCurrentUser
RegOpenKeyExA
RegCreateKeyExA
RegEnumKeyA
RegEnumValueA
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyA
shell32
SHGetPathFromIDListA
DragQueryFileA
DragFinish
DragAcceptFiles
Shell_NotifyIconA
SHAppBarMessage
ShellExecuteA
SHGetSpecialFolderPathA
SHGetSpecialFolderLocation
ole32
CLSIDFromString
CreateStreamOnHGlobal
GetHGlobalFromStream
StringFromCLSID
CoInitialize
CoUninitialize
StringFromGUID2
gdiplus
GdipDrawBeziersI
GdipDrawRectangle
GdipDrawRectangleI
GdipDrawRectangles
GdipDrawRectanglesI
GdipDrawEllipse
GdipDrawEllipseI
GdipDrawPie
GdipDrawPieI
GdipDrawPolygon
GdipDrawPolygonI
GdipDrawCurve
GdipDrawCurveI
GdipDrawCurve2
GdipDrawCurve2I
GdipDrawCurve3
GdipDrawCurve3I
GdipDrawClosedCurve
GdipDrawClosedCurveI
GdipDrawClosedCurve2
GdipDrawClosedCurve2I
GdipFillRectangleI
GdipFillRectangles
GdipFillRectanglesI
GdipFillPolygon
GdipFillPolygonI
GdipFillEllipse
GdipFillEllipseI
GdipFillPie
GdipFillPieI
GdipFillPath
GdipFillClosedCurve
GdipFillClosedCurve2
GdipFillClosedCurveI
GdipFillClosedCurve2I
GdipFillRegion
GdipDrawString
GdipMeasureString
GdipCreateRegion
GdipMeasureCharacterRanges
GdipDrawDriverString
GdipSetTextContrast
GdipGetTextContrast
GdipDrawImageRectRectI
GdipDrawImageI
GdipDrawCachedBitmap
GdipDrawImagePointsRect
GdipDrawImagePointsRectI
GdipDrawImagePointRect
GdipDrawImagePointRectI
GdipSetClipGraphics
GdipSetClipPath
GdipSetClipRect
GdipSetClipRectI
GdipSetClipRegion
GdipTranslateClip
GdipTranslateClipI
GdipGetClip
GdipGetClipBounds
GdipGetClipBoundsI
GdipGetVisibleClipBounds
GdipGetVisibleClipBoundsI
GdipIsClipEmpty
GdipIsVisibleClipEmpty
GdipIsVisiblePoint
GdipIsVisiblePointI
GdipIsVisibleRect
GdipIsVisibleRectI
GdipSaveGraphics
GdipRestoreGraphics
GdipBeginContainer
GdipBeginContainerI
GdipBeginContainer2
GdipEndContainer
GdipComment
GdipSetImageAttributesColorMatrix
GdipCreateFromHWNDICM
GdipCreateFromHWND
GdipCreateFromHDC2
GdipCreatePath2
GdipCreatePath2I
GdipClonePath
GdipResetPath
GdipGetPathFillMode
GdipSetPathFillMode
GdipGetPointCount
GdipGetPathData
GdipDisposeImage
GdipGetPathPoints
GdipGetPathPointsI
GdipStartPathFigure
GdipClosePathFigures
GdipSetPathMarker
GdipClearPathMarkers
GdipReversePath
GdipGetPathLastPoint
GdipAddPathLine
GdipAddPathLineI
GdipAddPathLine2
GdipAddPathLine2I
GdipAddPathArcI
GdipAddPathBezier
GdipAddPathBezierI
GdipAddPathBeziers
GdipAddPathBeziersI
GdipAddPathCurve
GdipAddPathCurve2
GdipAddPathCurve3
GdipAddPathCurveI
GdipAddPathCurve2I
GdipAddPathCurve3I
GdipAddPathClosedCurve
GdipAddPathClosedCurve2
GdipAddPathClosedCurveI
GdipAddPathClosedCurve2I
GdipAddPathRectangles
GdipAddPathRectangleI
GdipAddPathRectanglesI
GdipAddPathEllipse
GdipAddPathEllipseI
GdipAddPathPie
GdipAddPathPieI
GdipAddPathPolygon
GdipAddPathPolygonI
GdipAddPathPath
GdipAddPathString
GdipAddPathStringI
GdipTransformPath
GdipFlattenPath
GdipWidenPath
GdipWindingModeOutline
GdipWarpPath
GdipGetPathWorldBounds
GdipGetPathWorldBoundsI
GdipIsVisiblePathPoint
GdipIsVisiblePathPointI
GdipIsOutlineVisiblePathPoint
GdipIsOutlineVisiblePathPointI
GdipDeleteStringFormat
GdipCreateStringFormat
GdipStringFormatGetGenericDefault
GdipStringFormatGetGenericTypographic
GdipCloneStringFormat
GdipSetStringFormatFlags
GdipGetStringFormatFlags
GdipSetStringFormatAlign
GdipGetStringFormatAlign
GdipSetStringFormatLineAlign
GdipGetStringFormatLineAlign
GdipSetStringFormatTrimming
GdipGetStringFormatTrimming
GdipSetStringFormatHotkeyPrefix
GdipGetStringFormatHotkeyPrefix
GdipSetStringFormatTabStops
GdipGetStringFormatTabStopCount
GdipGetStringFormatTabStops
GdipSetStringFormatDigitSubstitution
GdipGetStringFormatDigitSubstitution
GdipSetStringFormatMeasurableCharacterRanges
GdipGetStringFormatMeasurableCharacterRangeCount
GdipDeleteFont
GdipCreateFont
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipCreateFontFromLogfontW
GdipCloneFont
GdipGetLogFontA
GdipGetLogFontW
GdipGetFamily
GdipGetFontStyle
GdipGetFontSize
GdipGetFontUnit
GdipGetFontHeight
GdipGetFontHeightGivenDPI
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipCloneImageAttributes
GdipSetImageAttributesToIdentity
GdipResetImageAttributes
GdipSetImageAttributesThreshold
GdipSetImageAttributesNoOp
GdipSetImageAttributesGamma
GdipSetImageAttributesColorKeys
GdipSetImageAttributesOutputChannel
GdipSetImageAttributesOutputChannelColorProfile
GdipSetImageAttributesRemapTable
GdipSetImageAttributesWrapMode
GdipGetImageAttributesAdjustedPalette
GdipCloneBrush
GdipGetBrushType
GdipCreateTexture
GdipCreateTexture2
GdipCreateTexture2I
GdipCreateTextureIA
GdipCreateTextureIAI
GdipGetTextureTransform
GdipSetTextureTransform
GdipResetTextureTransform
GdipMultiplyTextureTransform
GdipTranslateTextureTransform
GdipScaleTextureTransform
GdipDrawBeziers
GdipRotateTextureTransform
GdipGetTextureWrapMode
GdipSetTextureWrapMode
GdipGetTextureImage
GdipCreatePen2
GdipClonePen
GdipGetPenWidth
GdipSetPenWidth
GdipGetPenUnit
GdipSetPenUnit
GdipSetPenLineCap197819
GdipSetPenStartCap
GdipSetPenEndCap
GdipSetPenDashCap197819
GdipGetPenStartCap
GdipGetPenEndCap
GdipGetPenDashCap197819
GdipSetPenLineJoin
GdipGetPenLineJoin
GdipSetPenCustomStartCap
GdipGetPenCustomStartCap
GdipSetPenCustomEndCap
GdipGetPenCustomEndCap
GdipSetPenMiterLimit
GdipGetPenMiterLimit
GdipSetPenMode
GdipGetPenMode
GdipSetPenTransform
GdipGetPenTransform
GdipResetPenTransform
GdipMultiplyPenTransform
GdipRotatePenTransform
GdipTranslatePenTransform
GdipGetPenColor
GdipSetPenColor
GdipSetPenBrushFill
GdipGetPenBrushFill
GdipGetPenFillType
GdipSetPenDashStyle
GdipGetPenDashStyle
GdipGetPenDashOffset
GdipSetPenDashOffset
GdipGetPenDashCount
GdipGetPenDashArray
GdipSetPenDashArray
GdipSetPenCompoundArray
GdipGetPenCompoundCount
GdipGetPenCompoundArray
GdipSetSolidFillColor
GdipGetSolidFillColor
GdipCreateHatchBrush
GdipGetHatchStyle
GdipGetHatchForegroundColor
GdipGetHatchBackgroundColor
GdipDeleteRegion
GdipCreateRegionRect
GdipCreateRegionRectI
GdipCreateRegionPath
GdipCreateRegionHrgn
GdipCreateRegionRgnData
GdipCloneRegion
GdipSetInfinite
GdipSetEmpty
GdipCombineRegionRect
GdipCombineRegionRectI
GdipCombineRegionRegion
GdipCombineRegionPath
GdipTranslateRegion
GdipTranslateRegionI
GdipTransformRegion
GdipGetRegionBounds
GdipGetRegionBoundsI
GdipGetRegionDataSize
GdipGetRegionData
GdipGetRegionHRgn
GdipIsEmptyRegion
GdipIsInfiniteRegion
GdipIsEqualRegion
GdipIsVisibleRegionPoint
GdipIsVisibleRegionPointI
GdipIsVisibleRegionRect
GdipIsVisibleRegionRectI
GdipGetRegionScansCount
GdipGetRegionScans
GdipGetRegionScansI
GdipCreateLineBrush
GdipCreateLineBrushI
GdipCreateLineBrushFromRect
GdipCreateLineBrushFromRectI
GdipCreateLineBrushFromRectWithAngle
GdipCreateLineBrushFromRectWithAngleI
GdipGetLineColors
GdipSetLineColors
GdipGetLineRect
GdipGetLineRectI
GdipSetLineGammaCorrection
GdipGetLineGammaCorrection
GdipSetLineBlend
GdipGetLineBlendCount
GdipGetLineBlend
GdipSetLinePresetBlend
GdipGetLinePresetBlendCount
GdipGetLinePresetBlend
GdipSetLineSigmaBlend
GdipSetLineLinearBlend
GdipGetLineWrapMode
GdipSetLineWrapMode
GdipGetLineTransform
GdipSetLineTransform
GdipResetLineTransform
GdipMultiplyLineTransform
GdipTranslateLineTransform
GdipScaleLineTransform
GdipRotateLineTransform
GdipCreatePathGradient
GdipCreatePathGradientI
GdipCreatePathGradientFromPath
GdipGetPathGradientCenterColor
GdipSetPathGradientCenterColor
GdipGetPathGradientPointCount
GdipGetPathGradientSurroundColorCount
GdipGetPathGradientSurroundColorsWithCount
GdipSetPathGradientSurroundColorsWithCount
GdipGetPathGradientPath
GdipGetPathGradientCenterPoint
GdipGetPathGradientCenterPointI
GdipSetPathGradientCenterPoint
GdipGetPathGradientRect
GdipGetPathGradientRectI
GdipSetPathGradientGammaCorrection
GdipGetPathGradientGammaCorrection
GdipSetPathGradientBlend
GdipGetPathGradientBlendCount
GdipGetPathGradientBlend
GdipGetPathGradientPresetBlendCount
GdipGetPathGradientFocusScales
GdipSetPathGradientFocusScales
GdipSetPathGradientPresetBlend
GdipGetPathGradientPresetBlend
GdipSetPathGradientSigmaBlend
GdipSetPathGradientLinearBlend
GdipGetPathGradientWrapMode
GdipSetPathGradientWrapMode
GdipGetPathGradientTransform
GdipSetPathGradientTransform
GdipResetPathGradientTransform
GdipMultiplyPathGradientTransform
GdipTranslatePathGradientTransform
GdipScalePathGradientTransform
GdipRotatePathGradientTransform
GdipGetFontCollectionFamilyCount
GdipGetFontCollectionFamilyList
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipGetGenericFontFamilySansSerif
GdipGetGenericFontFamilySerif
GdipGetGenericFontFamilyMonospace
GdipCloneFontFamily
GdipGetFamilyName
GdipIsStyleAvailable
GdipGetEmHeight
GdipGetCellAscent
GdipGetCellDescent
GdipGetLineSpacing
GdipCreateMatrix2
GdipCreateMatrix3
GdipCreateMatrix3I
GdipCloneMatrix
GdipSetMatrixElements
GdipGetMatrixElements
GdipMultiplyMatrix
GdipInvertMatrix
GdipScaleMatrix
GdipShearMatrix
GdipTransformMatrixPoints
GdipTransformMatrixPointsI
GdipVectorTransformMatrixPoints
GdipVectorTransformMatrixPointsI
GdipIsMatrixInvertible
GdipIsMatrixIdentity
GdipIsMatrixEqual
GdipFree
GdipAlloc
GdipClosePathFigure
GdipAddPathArc
GdipAddPathRectangle
GdipCreatePath
GdipDrawImageRectRect
GdipGetImageDimension
GdipDeleteGraphics
GdipResetClip
GdipDeletePen
GdipDeletePath
GdipDrawPath
GdipCreatePen1
GdipSetCompositingQuality
GdipSetSmoothingMode
GdipSetClipHrgn
GdipCreateFromHDC
GdiplusStartup
GdipDrawBezierI
GdipDrawBezier
GdipDrawArcI
GdipDrawArc
GdipDrawLinesI
GdipDrawLines
GdipDrawLineI
GdipDrawLine
GdipGetNearestColor
GdipTransformPointsI
GdipTransformPoints
GdipGetPageScale
GdipSetPageScale
GdipGetPageUnit
GdipSetPageUnit
GdipRotateWorldTransform
GdipScaleWorldTransform
GdipTranslateWorldTransform
GdipMultiplyWorldTransform
GdipGetWorldTransform
GdipGetPixelOffsetMode
GdipSetPixelOffsetMode
GdipGetInterpolationMode
GdipGetTextRenderingHint
GdipSetTextRenderingHint
GdipGetSmoothingMode
GdipGetCompositingQuality
GdipSetRenderingOrigin
GdipGetRenderingOrigin
GdipSetCompositingMode
GdipGetCompositingMode
GdipFlush
GdipGraphicsClear
GdipReleaseDC
GdipGetDC
GdipGetDpiY
GdipGetDpiX
GdipDeleteMatrix
GdipResetWorldTransform
GdipDrawImage
GdipSetWorldTransform
GdipRotateMatrix
GdipTranslateMatrix
GdipCreateMatrix
GdipSetInterpolationMode
GdipDeleteBrush
GdipFillRectangle
GdipCreateSolidFill
GdipGetImageGraphicsContext
GdipBitmapApplyEffect
GdipBitmapSetResolution
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCloneBitmapAreaI
GdipCloneBitmapArea
GdipCreateHICONFromBitmap
GdipCreateHBITMAPFromBitmap
GdipBitmapSetPixel
GdipBitmapGetPixel
GdipCreateBitmapFromResource
GdipCreateBitmapFromHICON
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromGdiDib
GdipCreateBitmapFromGraphics
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipSetImagePalette
GdipGetImagePalette
GdipGetImagePaletteSize
GdipImageRotateFlip
GdipGetPropertyIdList
GdipGetPropertyCount
GdipRemovePropertyItem
GdipSetPropertyItem
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageSelectActiveFrame
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipImageGetFrameCount
GdipGetImageThumbnail
GdipGetImagePixelFormat
GdipGetImageFlags
GdipGetImageVerticalResolution
GdipGetImageHorizontalResolution
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageType
GdipGetImageBounds
GdipGetImageRawFormat
GdipGetEncoderParameterList
GdipGetEncoderParameterListSize
GdipSaveAddImage
GdipSaveAdd
GdipSaveImageToStream
gdi32
GetDIBits
GdiTransparentBlt
Rectangle
SetStretchBltMode
GetObjectA
GetStockObject
GdiAlphaBlend
CreateRoundRectRgn
ExtSelectClipRgn
GetRgnBox
CombineRgn
SelectClipRgn
IntersectClipRect
RectInRegion
CreateRectRgn
ExcludeClipRect
BitBlt
SetBkMode
SetPixel
GetPixel
CreateCompatibleBitmap
CreatePen
StretchBlt
CreateDIBSection
DeleteObject
SelectObject
CreateCompatibleDC
DeleteDC
shlwapi
PathFileExistsA
msimg32
AlphaBlend
setupapi
SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupDiCallClassInstaller
SetupDiClassNameFromGuidA
SetupDiGetClassDescriptionA
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInstanceIdA
SetupDiGetDeviceRegistryPropertyA
SetupDiSetClassInstallParamsA
imm32
ImmGetCompositionWindow
ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext
oleaut32
SysAllocString
SafeArrayGetElemsize
SafeArrayUnaccessData
SafeArrayAccessData
SysFreeString
VariantChangeType
VariantInit
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetDim
SafeArrayDestroy
VariantClear
VariantCopy
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 492KB - Virtual size: 577KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9.7MB - Virtual size: 9.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE